last executing test programs: 3m26.797599621s ago: executing program 3 (id=10): ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 3m25.594259143s ago: executing program 3 (id=17): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000014c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040}, 0xc051) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept(r0, 0x0, 0x0) 3m25.454061016s ago: executing program 3 (id=19): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 3m25.223986262s ago: executing program 3 (id=23): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x17f5) 3m24.831018303s ago: executing program 3 (id=25): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f00000003c0)=ANY=[], 0x0, 0x1e2, &(0x7f0000000bc0)="$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") getdents(r1, &(0x7f0000000300)=""/99, 0x63) 3m24.341951795s ago: executing program 3 (id=28): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000002300)=[{&(0x7f0000000840)=""/167, 0xa7}], 0x1) close(r1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.79870627s ago: executing program 32 (id=28): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) readv(r0, &(0x7f0000002300)=[{&(0x7f0000000840)=""/167, 0xa7}], 0x1) close(r1) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m4.119732884s ago: executing program 4 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x28, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) 3m2.899666455s ago: executing program 4 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000180)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'\x00', 0x400}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m2.472807246s ago: executing program 4 (id=103): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) read$dsp(r5, &(0x7f0000000280)=""/79, 0x4f) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}], 0x1) 3m1.661747047s ago: executing program 4 (id=112): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xfffffffd}) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 3m1.287127436s ago: executing program 4 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3m0.74860452s ago: executing program 4 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) r1 = gettid() fcntl$setown(r0, 0x8, r1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0xfffffff7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='b', 0x1}], 0x1}}], 0x2, 0x404c851) 2m45.936725704s ago: executing program 2 (id=187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.536302684s ago: executing program 33 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) r1 = gettid() fcntl$setown(r0, 0x8, r1) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000100)=0xfffffff7, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='b', 0x1}], 0x1}}], 0x2, 0x404c851) 2m43.142989735s ago: executing program 2 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 2m42.54666464s ago: executing program 2 (id=195): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x2cf2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x2) 2m41.872785057s ago: executing program 2 (id=196): r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812471, 0x0) 2m41.304588782s ago: executing program 2 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) 2m40.531922861s ago: executing program 2 (id=202): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000039, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m39.907957137s ago: executing program 34 (id=202): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000039, r2, 0x0) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000010000002003e00cd000000c9030000000000004000000000000000ea0200000000000000000100050038000f"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 46.25265025s ago: executing program 0 (id=617): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xed\xcf\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r1, 0x0, 0x4, 0x6) splice(r2, 0x0, r0, 0x0, 0x4010d00, 0x0) 46.041861646s ago: executing program 0 (id=619): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xffffffff, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x597100ac16bbc69, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 45.563162328s ago: executing program 0 (id=621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="2e67450fc77eb7b9e60a00000f323e66460f38806fca48b8a1ae00000000000066410f3880200f21f835c00000000f23f8660f3881143126430f01c2440f01cb8080430000c0c03235010000000f3066b8cd008ee0", 0x55}], 0x1, 0x43, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001a40)=@vmx={0x109, 0x0, 0x2080, {0x2, 0x0, {0x3}, 0x0, 0x4}, {"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", "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"}}) 45.155337238s ago: executing program 0 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 44.856698876s ago: executing program 0 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) writev(r0, &(0x7f0000000840), 0x0) 44.464095886s ago: executing program 0 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 43.779044323s ago: executing program 35 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 32.652522394s ago: executing program 5 (id=654): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf3, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x3, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x800003d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x2000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000008, 0x10002, 0x12b, 0x8000, 0x40010, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2c0, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0xc0000000, 0xe, 0x313, 0x5, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x8, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x8001, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x9, 0x2f, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x43e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0xcc6, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0xcf5d, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x400003, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r0, 0x10000000005, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 32.385585951s ago: executing program 5 (id=655): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x3, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x58) syz_emit_ethernet(0x11, &(0x7f0000000680)=ANY=[], 0x0) 32.134238528s ago: executing program 5 (id=657): setns(0xc9, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x38, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@fragment={0x2b, 0x0, 0x6, 0x0, 0x0, 0xa, 0x65}]}}}}}}}, 0x0) 31.978407352s ago: executing program 5 (id=658): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000380)={[{@utf8no}, {@fat=@sys_immutable}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$eJzs3UFPE00YwPGHFtpSAu2BvMn7Jm98ohe9bKB+gsZAYmyiAWrEg8kiW226tqRbMTVGuHn1E/gBiN48aaLeDRdv3o0XLiZeOIhrut21pSyhjYGt8P8lZIaZfbozzJQ83cDuzq3nDyolxyiZDYmlVGIim7Irkm3VfCN+GfPqCem2KZcmvn/+f3H59rV8oTC3oDqfX7qcU9Wpc+8ePXl5/kNj4ubrqbdJ2c7e2fmW+7L9z/a/Oz+XgleviZi6Uqs1zBXb0tWyUzFUb9iW6VharjpWvaFd/SW7trbWVLO6Opleq1uOo2a1qRWrqY2aNupNNe+Z5aoahqGT6d7hn3rxgSOKewmR/LEMBlEYD2us1/NmPLSzuHUSgwIAAMMlqvz/ftnRsqPVWiu/b73wIfl/TAbI/0XC8n8cqri1sGCS/59yrfw/7b9/9yP/BwAAAAAAAAAAAAAAAAAAAADgb7ArknFdN7Prul4ZfCVFJCUiwfdRjxPHI1h31v9sWlweEf8f91Ii9rP1YkLaZbs/X5Ky2GLJzJjID28/+Nr1+auFuRn1ZOW9vbFebEW2yrgkg/hANjx+th2v3fEbMibp7vPnJCPT4fG5kPjWPC5ecJP+mS0xJCOf7kpNbFn19nUn/ums6pXrhZ74ce84AAAAAABOA0N/O/D53es3NLhtSE9/u7FzfUAynesDc2HXB3o+X4/Kf6PRzRsAAAAAgLPEaT6umLZt1Y+qpDotH/uPGqpK8PyDgcPjIV3BX8REN51UvwePiojf8mZY1qKfSuwPfrzxAVZ57OB+TojIvpbpk9/zr14M8Pbsr/L1Yf+bNqrfSAAAAACOS5D0n5mHZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMIT6vXlYcPyBrj3XdY8I7zpdPJpZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMPhVwAAAP//ZXYNzw==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 31.745651717s ago: executing program 5 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) 31.141738293s ago: executing program 5 (id=663): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0xfffe, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(0x4) 30.636232666s ago: executing program 36 (id=663): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0xfffe, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(0x4) 7.774148593s ago: executing program 8 (id=753): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) 7.557753879s ago: executing program 1 (id=754): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') (async) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 7.480454531s ago: executing program 8 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000340)={0x80003, 0x0, {[0x3, 0xfffffffffffffc01, 0x2, 0x8, 0x7fffffffffffffff, 0x8, 0x7, 0xc8fa]}}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.606563063s ago: executing program 8 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) shutdown(r0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x3b) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0) 6.365806349s ago: executing program 8 (id=761): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xa, 0x7ffc0001}]}) r0 = gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 5.989740239s ago: executing program 8 (id=764): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x1, 0x1) getdents64(r1, 0x0, 0x0) 5.728719445s ago: executing program 8 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c"], 0x66) 4.253954762s ago: executing program 1 (id=768): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xd) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x2d80, 0x82) 3.930131461s ago: executing program 1 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./merge\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)='lowerdir=./lower,upperdir=./upper,workdir=./work,index=on,nfs_export=on,uuid=off\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@raw={0x1c, 0xf8, {"00000000fb19020100"/28}}, 0x0) 3.643915038s ago: executing program 1 (id=771): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000800)='1', 0x1) 3.335541056s ago: executing program 1 (id=773): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) lseek(r0, 0x851, 0x0) 2.665449522s ago: executing program 7 (id=775): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x8000000000000000, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x1, 0x64, 0xe, 0x0, 0x3, 0xfc}, {0x3000, 0x200000, 0x0, 0x0, 0x0, 0xff, 0x80, 0x40, 0x6, 0x1, 0x4, 0x2}, {0x9000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x80a0000, 0xb000, 0x3, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x42}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0xee, 0x6, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {0xc000}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xc, 0x8000, 0x0, [0xdd41, 0x0, 0x4]}) 2.307972312s ago: executing program 7 (id=777): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000c, 0x0) 2.153877706s ago: executing program 1 (id=778): bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/5, 0xd}], 0x27, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.053809158s ago: executing program 7 (id=779): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) fanotify_init(0x200, 0x1000) 1.677068418s ago: executing program 7 (id=781): openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x40200, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xb8f0, 0xc000, 0x3, 0x191}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.621754919s ago: executing program 6 (id=782): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000002c0)=""/55, 0x37) 1.299715937s ago: executing program 6 (id=783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000500)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xffffffff, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x597100ac16bbc69, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.298065277s ago: executing program 7 (id=791): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x3, 0x7}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2, 0x0, r3}) 1.022110344s ago: executing program 7 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 581.875075ms ago: executing program 6 (id=785): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r5}) 361.765341ms ago: executing program 6 (id=786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 286.952943ms ago: executing program 6 (id=787): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 6 (id=788): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0xff, 0x78, 0xa3, 0x23e, 0x2, 0x3e, 0xcd, 0x3ca, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x2, 0x0, 0x5, 0x10, 0x7, 0x2}], "", ['\x00', '\x00', '\x00']}, 0x378) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): 6081 - 0 [ 162.270406][ T7096] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 162.309046][ T7096] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.363134][ T5779] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.440126][ T170] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.520438][ T7096] XFS (loop1): Ending clean mount [ 162.528243][ T7096] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 162.549780][ T7096] XFS (loop1): Unmount and run xfs_repair [ 162.556388][ T7096] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 162.566367][ T7096] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 162.579090][ T7096] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 162.590891][ T7096] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 162.605565][ T7096] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 162.615271][ T5779] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.628866][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.647918][ T7096] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 162.683555][ T5779] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 162.693263][ T7096] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.693410][ T7096] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 162.693427][ T7096] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.693985][ T7096] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 162.720289][ T5779] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.755571][ T170] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.793341][ T7096] XFS (loop1): Failed to initialize disk quotas. [ 162.811539][ T5779] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 162.837938][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.893571][ T5779] usb 1-1: Product: syz [ 162.897866][ T5779] usb 1-1: Manufacturer: syz [ 162.902532][ T5779] usb 1-1: SerialNumber: syz [ 162.950600][ T5779] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 163.007204][ T7147] loop5: detected capacity change from 0 to 16 [ 163.013729][ T5779] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 163.032074][ T7147] erofs: (device loop5): mounted with root inode @ nid 36. [ 163.040547][ T5779] usbserial_generic 1-1:1.0: generic converter detected [ 163.083446][ T5779] usb 1-1: generic converter now attached to ttyUSB0 [ 163.206716][ T28] audit: type=1800 audit(1786110800.798:83): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.277" name="file1" dev="overlay" ino=86 res=0 errno=0 [ 163.396086][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.458931][ T969] usb 1-1: USB disconnect, device number 4 [ 163.552116][ T969] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 163.570794][ T969] usbserial_generic 1-1:1.0: device disconnected [ 163.833841][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.859723][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.872061][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.885273][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.896193][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.908664][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.503058][ T5779] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.602845][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 164.743101][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 164.760411][ T5779] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.783480][ T5779] usb 1-1: config 0 has no interface number 0 [ 164.789699][ T5779] usb 1-1: config 0 interface 184 has no altsetting 0 [ 164.811033][ T5779] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.822123][ T7182] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 164.830467][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.882558][ T5779] usb 1-1: Product: syz [ 164.902897][ T5779] usb 1-1: Manufacturer: syz [ 164.907713][ T5779] usb 1-1: SerialNumber: syz [ 164.945231][ T5779] usb 1-1: config 0 descriptor?? [ 164.975055][ T5779] smsc75xx v1.0.0 [ 165.253807][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.278500][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.286101][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.293601][ T7156] bridge_slave_0: entered allmulticast mode [ 165.301565][ T7156] bridge_slave_0: entered promiscuous mode [ 165.335761][ T170] hsr_slave_0: left promiscuous mode [ 165.360207][ T170] hsr_slave_1: left promiscuous mode [ 165.368262][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.376521][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.390199][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.399035][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.408171][ T170] bridge_slave_1: left allmulticast mode [ 165.414612][ T170] bridge_slave_1: left promiscuous mode [ 165.420578][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.435969][ T170] bridge_slave_0: left allmulticast mode [ 165.452570][ T170] bridge_slave_0: left promiscuous mode [ 165.473412][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.496646][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 165.507534][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 165.518036][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 165.545136][ T9] usb 6-1: New USB device found, idVendor=15a4, idProduct=9020, bcdDevice= 1.00 [ 165.556056][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.582028][ T9] usb 6-1: Product: syz [ 165.582489][ T170] veth1_macvtap: left promiscuous mode [ 165.587864][ T9] usb 6-1: Manufacturer: syz [ 165.593548][ T170] veth0_macvtap: left promiscuous mode [ 165.602286][ T170] veth1_vlan: left promiscuous mode [ 165.609039][ T170] veth0_vlan: left promiscuous mode [ 165.617818][ T5779] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 165.632987][ T9] usb 6-1: SerialNumber: syz [ 165.647217][ T5779] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.659997][ T7185] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 165.674408][ T7185] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 165.681840][ T7185] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 165.727581][ T9] af9005: boot packet bulk message failed: -71 (252/0) [ 165.735246][ T9] dvb-usb: found a 'Afatech DVB-T USB1.1 stick' in cold state, will try to load a firmware [ 165.783656][ T9] usb 6-1: Direct firmware load for af9005.fw failed with error -2 [ 165.802188][ T9] usb 6-1: Falling back to sysfs fallback for: af9005.fw [ 166.024344][ T51] Bluetooth: hci0: command tx timeout [ 166.291069][ T5779] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 166.316859][ T5779] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 166.327960][ T5779] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 166.359188][ T5779] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 166.375353][ T5779] usb 1-1: USB disconnect, device number 5 [ 167.072362][ T7204] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 167.291969][ T170] team0 (unregistering): Port device team_slave_1 removed [ 167.426664][ T170] team0 (unregistering): Port device team_slave_0 removed [ 167.553981][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.666800][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.012375][ T7214] loop5: detected capacity change from 0 to 32768 [ 168.067432][ T7214] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.093642][ T51] Bluetooth: hci0: command tx timeout [ 168.265240][ T7214] XFS (loop5): Ending clean mount [ 168.330866][ T7214] XFS (loop5): Quotacheck needed: Please wait. [ 168.428232][ T7214] XFS (loop5): Quotacheck: Done. [ 168.436841][ T170] bond0 (unregistering): Released all slaves [ 168.597411][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.605099][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.615214][ T7156] bridge_slave_1: entered allmulticast mode [ 168.626556][ T7156] bridge_slave_1: entered promiscuous mode [ 168.764364][ T6622] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.813166][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.844905][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.071541][ T7156] team0: Port device team_slave_0 added [ 169.095682][ T7156] team0: Port device team_slave_1 added [ 169.201630][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.246206][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.333063][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.389281][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.423140][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.544527][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.954521][ T7156] hsr_slave_0: entered promiscuous mode [ 169.988122][ T7156] hsr_slave_1: entered promiscuous mode [ 170.019730][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.027781][ T7156] Cannot create hsr debugfs directory [ 170.187964][ T51] Bluetooth: hci0: command tx timeout [ 170.778270][ T7245] loop1: detected capacity change from 0 to 32768 [ 170.830541][ T7251] loop0: detected capacity change from 0 to 32768 [ 170.848734][ T7251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (7251) [ 170.900104][ T7245] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.936760][ T7251] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.953174][ T7251] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 170.979867][ T7251] BTRFS info (device loop0): setting nodatasum [ 170.992612][ T7251] BTRFS info (device loop0): force zlib compression, level 3 [ 171.025211][ T7251] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 171.054087][ T7251] BTRFS info (device loop0): use lzo compression, level 0 [ 171.091798][ T7251] BTRFS info (device loop0): turning on flush-on-commit [ 171.116179][ T7245] XFS (loop1): Ending clean mount [ 171.146258][ T7251] BTRFS info (device loop0): enabling auto defrag [ 171.152861][ T7251] BTRFS info (device loop0): max_inline at 4096 [ 171.217622][ T7251] BTRFS info (device loop0): using free space tree [ 171.350561][ T7156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.393321][ T7251] BTRFS info (device loop0): enabling ssd optimizations [ 171.424650][ T7156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.472898][ T7156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.504892][ T5774] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.513861][ T7156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.940811][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.048012][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.114483][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.121848][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.155149][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.162444][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.180535][ T5772] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.254108][ T51] Bluetooth: hci0: command tx timeout [ 172.314895][ T7156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.158619][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.414117][ T7328] syzkaller1: entered promiscuous mode [ 173.442307][ T7328] syzkaller1: entered allmulticast mode [ 173.832620][ T7308] loop0: detected capacity change from 0 to 32768 [ 173.935951][ T7308] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.097214][ T7343] loop5: detected capacity change from 0 to 4096 [ 174.348230][ T7357] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.469778][ T7308] XFS (loop0): Ending clean mount [ 174.496934][ T7156] veth0_vlan: entered promiscuous mode [ 174.542326][ T7308] XFS (loop0): Quotacheck needed: Please wait. [ 174.570003][ T7156] veth1_vlan: entered promiscuous mode [ 174.618033][ T28] audit: type=1800 audit(1786110812.218:84): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.314" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 174.745906][ T7156] veth0_macvtap: entered promiscuous mode [ 174.766481][ T7308] XFS (loop0): Quotacheck: Done. [ 174.790728][ T7156] veth1_macvtap: entered promiscuous mode [ 174.934592][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.964014][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.011416][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.072886][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.082887][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.175512][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.186559][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.199946][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.258513][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.278227][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.288927][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.317558][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.336306][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.350366][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.387705][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.451653][ T7156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.466772][ T7156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.477148][ T7156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.490369][ T7156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.755748][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.784964][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.877033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.917640][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.363189][ T969] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 176.555753][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.593602][ T969] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.603997][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.630753][ T969] usb 7-1: config 0 descriptor?? [ 176.905230][ T969] usbhid 7-1:0.0: can't add hid device: -71 [ 176.913084][ T969] usbhid: probe of 7-1:0.0 failed with error -71 [ 176.954029][ T969] usb 7-1: USB disconnect, device number 2 [ 177.261116][ T7391] loop5: detected capacity change from 0 to 128 [ 177.497514][ T969] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 177.713257][ T969] usb 7-1: Using ep0 maxpacket: 32 [ 177.725411][ T969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.763085][ T969] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 177.787827][ T969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.823890][ T969] usb 7-1: config 0 descriptor?? [ 177.855887][ T969] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 177.892379][ T969] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 178.094514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.215401][ T7415] gre1: entered promiscuous mode [ 178.380313][ T5812] usb 7-1: USB disconnect, device number 3 [ 178.410266][ T5812] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 179.142432][ T7429] loop0: detected capacity change from 0 to 2048 [ 179.291390][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.798021][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.130520][ T7455] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 180.193724][ T7455] CIFS: Attempting to mount //127.0.0.1/share [ 180.283665][ T7457] CIFS: VFS: Invalid response size 0 for command 0 [ 180.575041][ T7464] loop1: detected capacity change from 0 to 128 [ 180.621855][ T7455] CIFS: VFS: cifs_mount failed w/return code = -5 [ 181.094423][ T7453] loop0: detected capacity change from 0 to 32768 [ 181.144608][ T7453] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.203562][ T7460] loop6: detected capacity change from 0 to 32768 [ 181.226781][ T7460] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.332 (7460) [ 181.304819][ T7460] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 181.332296][ T7460] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 181.352212][ T7460] BTRFS info (device loop6): enabling auto defrag [ 181.362307][ T7460] BTRFS info (device loop6): force clearing of disk cache [ 181.393284][ T7460] BTRFS info (device loop6): disabling log replay at mount time [ 181.401093][ T7460] BTRFS info (device loop6): turning on async discard [ 181.418328][ T7460] BTRFS info (device loop6): setting nodatacow, compression disabled [ 181.434447][ T7460] BTRFS info (device loop6): turning off async discard [ 181.451467][ T7460] BTRFS info (device loop6): disabling free space tree [ 181.478267][ T7453] XFS (loop0): Ending clean mount [ 181.483572][ T7460] BTRFS info (device loop6): disabling tree log [ 181.489895][ T7460] BTRFS info (device loop6): enabling disk space caching [ 181.517792][ T7460] BTRFS info (device loop6): disk space caching is enabled [ 181.520649][ T7453] XFS (loop0): Quotacheck needed: Please wait. [ 181.617483][ T7453] XFS (loop0): Quotacheck: Done. [ 181.850894][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.904403][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 182.043571][ T7156] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 182.383086][ T6067] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by udevd (6067) [ 183.450447][ T5779] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.683579][ T5779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.746293][ T5779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.777233][ T5779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 183.845937][ T5779] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 183.881755][ T5779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.912500][ T5779] usb 7-1: Product: syz [ 183.922621][ T5779] usb 7-1: Manufacturer: syz [ 183.932785][ T5779] usb 7-1: SerialNumber: syz [ 183.949172][ T5779] usb 7-1: config 0 descriptor?? [ 183.962322][ T7540] GUP no longer grows the stack in syz.1.345 (7540): 200000004000-20000000a000 (200000002000) [ 184.003524][ T7540] CPU: 1 PID: 7540 Comm: syz.1.345 Not tainted syzkaller #0 [ 184.010916][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.021054][ T7540] Call Trace: [ 184.024386][ T7540] [ 184.027372][ T7540] dump_stack_lvl+0x18c/0x250 [ 184.032123][ T7540] ? show_regs_print_info+0x20/0x20 [ 184.037391][ T7540] ? load_image+0x420/0x420 [ 184.042014][ T7540] ? find_vma+0x134/0x1b0 [ 184.046478][ T7540] __get_user_pages+0xfe7/0x1580 [ 184.051783][ T7540] ? populate_vma_page_range+0x380/0x380 [ 184.057504][ T7540] get_user_pages_remote+0x39e/0xb90 [ 184.062887][ T7540] ? get_dump_page+0x200/0x200 [ 184.067736][ T7540] __access_remote_vm+0x1fc/0x570 [ 184.072833][ T7540] ? generic_access_phys+0x650/0x650 [ 184.078203][ T7540] ? alloc_pages+0x4e1/0x740 [ 184.083031][ T7540] ? do_raw_spin_unlock+0x121/0x230 [ 184.088325][ T7540] proc_pid_cmdline_read+0x44b/0x830 [ 184.093690][ T7540] ? _raw_spin_unlock+0x40/0x40 [ 184.098626][ T7540] ? comm_show+0x150/0x150 [ 184.103165][ T7540] ? common_file_perm+0x180/0x1f0 [ 184.108262][ T7540] ? fsnotify_perm+0x271/0x5e0 [ 184.113098][ T7540] do_iter_read+0x4fb/0xcb0 [ 184.117694][ T7540] ? comm_show+0x150/0x150 [ 184.122264][ T7540] ? vfs_iter_read+0xa0/0xa0 [ 184.126927][ T7540] ? __import_iovec+0x5f2/0x850 [ 184.131863][ T7540] ? import_iovec+0x73/0xa0 [ 184.136439][ T7540] do_preadv+0x237/0x390 [ 184.140746][ T7540] ? do_writev+0x480/0x480 [ 184.145244][ T7540] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.151321][ T7540] ? lock_chain_count+0x20/0x20 [ 184.156247][ T7540] ? lockdep_hardirqs_on+0x98/0x150 [ 184.161534][ T7540] do_syscall_64+0x55/0xb0 [ 184.166108][ T7540] ? clear_bhb_loop+0x40/0x90 [ 184.170940][ T7540] ? clear_bhb_loop+0x40/0x90 [ 184.175688][ T7540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.181700][ T7540] RIP: 0033:0x7f774399e0d9 [ 184.186184][ T7540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.206118][ T7540] RSP: 002b:00007f774493f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 184.214617][ T7540] RAX: ffffffffffffffda RBX: 00007f7743c25fa0 RCX: 00007f774399e0d9 [ 184.222649][ T7540] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 184.230681][ T7540] RBP: 00007f7743a35024 R08: 00000000fffffff9 R09: 0000000000000000 [ 184.238717][ T7540] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 184.246747][ T7540] R13: 00007f7743c26038 R14: 00007f7743c25fa0 R15: 00007fff9a90ab18 [ 184.254831][ T7540] [ 184.282062][ T5779] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 184.330600][ T7546] loop0: detected capacity change from 0 to 4096 [ 184.406066][ T7548] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.534592][ T5816] usb 7-1: USB disconnect, device number 4 [ 184.548093][ T28] audit: type=1800 audit(1786110822.138:85): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.346" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 184.811613][ T7556] loop5: detected capacity change from 0 to 1764 [ 184.933264][ T5812] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 185.061819][ T7556] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 185.323877][ T7551] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 185.893119][ T27] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 186.096285][ T7554] loop1: detected capacity change from 0 to 32768 [ 186.103108][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 186.108953][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.134983][ T27] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 186.152285][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.206477][ T7554] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.209882][ T27] usb 7-1: config 0 descriptor?? [ 186.235025][ T27] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 186.500309][ T7554] XFS (loop1): Ending clean mount [ 186.544105][ T7554] XFS (loop1): Quotacheck needed: Please wait. [ 186.670218][ T7554] XFS (loop1): Quotacheck: Done. [ 186.679267][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.698820][ T5812] usb 1-1: no configurations [ 186.707957][ T5812] usb 1-1: can't read configurations, error -22 [ 186.875274][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.086835][ T7600] (null): rxe_set_mtu: Set mtu to 1024 [ 187.306306][ T7600] infiniband syz0: set active [ 187.311743][ T7600] infiniband syz0: added veth0 [ 187.496902][ T7600] RDS/IB: syz0: added [ 187.505519][ T7600] smc: adding ib device syz0 with port count 1 [ 187.512407][ T7600] smc: ib device syz0 port 1 has pnetid [ 187.768093][ T8] usb 7-1: USB disconnect, device number 5 [ 188.624879][ T7612] loop0: detected capacity change from 0 to 32768 [ 188.671606][ T7612] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 188.801601][ T7612] XFS (loop0): Ending clean mount [ 189.130690][ T5772] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 189.976588][ T7647] loop0: detected capacity change from 0 to 16 [ 190.030590][ T7647] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.345495][ T7660] loop6: detected capacity change from 0 to 1024 [ 190.386795][ T7660] hfsplus: invalid length 32517 has been corrected to 255 [ 190.532495][ T28] audit: type=1800 audit(1786110828.128:86): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.366" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 190.905063][ T49] hfsplus: b-tree write err: -5, ino 25 [ 190.915193][ T49] hfsplus: b-tree write err: -5, ino 4 [ 190.921086][ T49] hfsplus: b-tree write err: -5, ino 2 [ 191.223184][ T5779] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 191.449395][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 191.462500][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.476645][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 191.483539][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.494676][ T5779] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 191.508899][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.521481][ T5779] usb 2-1: Product: syz [ 191.530302][ T5779] usb 2-1: Manufacturer: syz [ 191.540395][ T5779] usb 2-1: SerialNumber: syz [ 191.553572][ T5779] usb 2-1: config 0 descriptor?? [ 191.693137][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 191.700593][ T27] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 191.723002][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.733556][ T27] usb 1-1: config 0 has no interface number 0 [ 191.742435][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 191.756988][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.780482][ T27] usb 1-1: Product: syz [ 191.785189][ T27] usb 1-1: Manufacturer: syz [ 191.800277][ T5779] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 191.803420][ T27] usb 1-1: SerialNumber: syz [ 191.826206][ T27] usb 1-1: config 0 descriptor?? [ 192.054028][ T5816] usb 2-1: USB disconnect, device number 5 [ 192.070852][ T27] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 192.085643][ T27] usb 1-1: No valid video chain found. [ 192.318502][ T5869] usb 1-1: USB disconnect, device number 8 [ 192.588104][ T7713] loop6: detected capacity change from 0 to 512 [ 192.605356][ T7713] EXT4-fs (loop6): Test dummy encryption mode enabled [ 192.638957][ T7713] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.382: inode has both inline data and extents flags [ 192.665464][ T7713] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.382: couldn't read orphan inode 15 (err -117) [ 192.685240][ T7713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.144415][ T7713] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 193.396288][ T7156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.616772][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.388'. [ 193.694345][ T7735] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.704818][ T7735] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.713938][ T7735] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.722740][ T7735] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.741961][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.388'. [ 194.180232][ T7743] loop5: detected capacity change from 0 to 4096 [ 194.271843][ T7743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.457455][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.676719][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.713037][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.738908][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.744774][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.745983][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780407][ T23] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 194.808455][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.834641][ T23] usb 1-1: Product: syz [ 194.838965][ T23] usb 1-1: Manufacturer: syz [ 194.853400][ T23] usb 1-1: SerialNumber: syz [ 194.870861][ T23] usb 1-1: config 0 descriptor?? [ 195.047434][ T7744] loop6: detected capacity change from 0 to 32768 [ 195.084397][ T7744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.390 (7744) [ 195.120146][ T7744] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.141736][ T23] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 195.153372][ T7744] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 195.174845][ T7744] BTRFS info (device loop6): force clearing of disk cache [ 195.202548][ T7744] BTRFS info (device loop6): metadata ratio 0 [ 195.219568][ T7744] BTRFS info (device loop6): enabling ssd optimizations [ 195.235220][ T7744] BTRFS info (device loop6): using spread ssd allocation scheme [ 195.258568][ T7744] BTRFS info (device loop6): using free space tree [ 195.397505][ T5869] usb 1-1: USB disconnect, device number 9 [ 195.460074][ T7744] BTRFS info (device loop6): auto enabling async discard [ 195.507621][ T7744] BTRFS info (device loop6): rebuilding free space tree [ 196.594779][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.947787][ T7156] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.979842][ T170] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 198.331694][ T7819] loop1: detected capacity change from 0 to 32768 [ 198.368759][ T7819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.397 (7819) [ 198.451036][ T7819] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.480907][ T7819] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 198.501794][ T7819] BTRFS info (device loop1): setting nodatacow, compression disabled [ 198.550556][ T7819] BTRFS info (device loop1): turning on flush-on-commit [ 198.567805][ T7819] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 198.621759][ T7819] BTRFS info (device loop1): use lzo compression, level 0 [ 198.674920][ T7819] BTRFS info (device loop1): setting nodatasum [ 198.681192][ T7819] BTRFS info (device loop1): use no compression [ 198.733431][ T7819] BTRFS info (device loop1): trying to use backup root at mount time [ 198.741668][ T7819] BTRFS info (device loop1): max_inline at 0 [ 198.793154][ T7819] BTRFS info (device loop1): using free space tree [ 198.983291][ T170] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 199.029220][ T7819] BTRFS warning (device loop1): couldn't read tree root [ 199.051804][ T7819] BTRFS warning (device loop1): try to load backup roots slot 1 [ 199.085715][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 199.168813][ T7819] BTRFS warning (device loop1): couldn't read tree root [ 199.189519][ T7819] BTRFS warning (device loop1): try to load backup roots slot 2 [ 199.246851][ T59] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 199.288142][ T7819] BTRFS warning (device loop1): couldn't read tree root [ 199.307133][ T7819] BTRFS warning (device loop1): try to load backup roots slot 3 [ 199.370659][ T7819] BTRFS info (device loop1): enabling ssd optimizations [ 199.390316][ T7819] BTRFS info (device loop1): auto enabling async discard [ 199.432546][ T7819] BTRFS info (device loop1): rebuilding free space tree [ 199.485015][ T7819] BTRFS info (device loop1): checking UUID tree [ 199.540327][ T7840] loop6: detected capacity change from 0 to 32768 [ 199.590415][ T7840] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.401 (7840) [ 199.799588][ T28] audit: type=1800 audit(1786110837.398:87): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.397" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 199.971166][ T6068] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (6068) [ 200.008250][ T7819] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 200.061833][ T7819] File: /113/file1/file1 PID: 7819 Comm: syz.1.397 [ 200.192169][ T7890] loop6: detected capacity change from 0 to 1024 [ 200.254437][ T7890] EXT4-fs: Ignoring removed bh option [ 200.313110][ T7890] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.363153][ T7890] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 200.464822][ T7890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.520264][ T7869] loop0: detected capacity change from 0 to 32768 [ 200.532425][ T7869] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.404 (7869) [ 200.572489][ T7869] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.596991][ T7890] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.614637][ T7869] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 200.631398][ T7869] BTRFS info (device loop0): force clearing of disk cache [ 200.644172][ T7869] BTRFS info (device loop0): metadata ratio 0 [ 200.662050][ T7869] BTRFS info (device loop0): enabling ssd optimizations [ 200.676030][ T7869] BTRFS info (device loop0): using spread ssd allocation scheme [ 200.696114][ T7869] BTRFS info (device loop0): using free space tree [ 200.810638][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.968988][ T7869] BTRFS info (device loop0): auto enabling async discard [ 201.044271][ T7919] loop5: detected capacity change from 0 to 512 [ 201.059217][ T7869] BTRFS info (device loop0): rebuilding free space tree [ 201.224871][ T7919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.284929][ T7156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.329814][ T7919] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.678673][ T3435] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 201.783511][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.870694][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.014616][ T7934] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.073803][ T7938] loop5: detected capacity change from 0 to 128 [ 202.081415][ T7934] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 202.144573][ T7938] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.185855][ T7934] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 202.198575][ T7934] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3) [ 202.209548][ T7934] overlayfs: d_ino too big (gadget, ino=4611686018427391282, xinobits=3) [ 202.218376][ T7934] overlayfs: d_ino too big (snd_seq, ino=4611686018427391412, xinobits=3) [ 202.227018][ T7934] overlayfs: d_ino too big (netdevsim, ino=4611686018427411838, xinobits=3) [ 202.236964][ T7934] overlayfs: d_ino too big (serio, ino=4611686018427391299, xinobits=3) [ 202.245720][ T7934] overlayfs: d_ino too big (ulpi, ino=4611686018427391241, xinobits=3) [ 202.254269][ T7934] overlayfs: d_ino too big (coreboot, ino=4611686018427436239, xinobits=3) [ 202.263124][ T7934] overlayfs: d_ino too big (hdaudio, ino=4611686018427391418, xinobits=3) [ 202.271827][ T7934] overlayfs: d_ino too big (iio, ino=4611686018427391381, xinobits=3) [ 202.272092][ T7938] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.293087][ T7934] overlayfs: d_ino too big (firewire, ino=4611686018427411850, xinobits=3) [ 202.651738][ T6622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.789697][ T7982] loop1: detected capacity change from 0 to 2048 [ 203.811905][ T7982] hpfs: bad mount options. [ 203.855749][ T6067] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.159867][ T7993] loop1: detected capacity change from 0 to 40427 [ 205.206281][ T8021] loop5: detected capacity change from 0 to 512 [ 205.229173][ T7993] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 205.240176][ T7993] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 205.257627][ T8021] EXT4-fs (loop5): Test dummy encryption mode enabled [ 205.296158][ T7993] F2FS-fs (loop1): invalid crc value [ 205.331484][ T8021] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.431: inode has both inline data and extents flags [ 205.422017][ T7993] F2FS-fs (loop1): Found nat_bits in checkpoint [ 205.433331][ T8021] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.431: couldn't read orphan inode 15 (err -117) [ 205.498177][ T8021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.684629][ T7993] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 205.691807][ T7993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.934298][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.958498][ T8039] syz.1.427: attempt to access beyond end of device [ 205.958498][ T8039] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.958985][ T8037] loop0: detected capacity change from 0 to 4096 [ 206.206759][ T28] audit: type=1800 audit(1786110843.808:88): pid=7993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.427" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 206.857670][ T8038] loop6: detected capacity change from 0 to 32768 [ 206.972185][ T8038] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.272350][ T8038] XFS (loop6): Ending clean mount [ 207.308135][ T8038] XFS (loop6): Quotacheck needed: Please wait. [ 207.361182][ T8046] loop5: detected capacity change from 0 to 32768 [ 207.422151][ T8038] XFS (loop6): Quotacheck: Done. [ 207.464906][ T8046] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 207.585756][ T8046] XFS (loop5): Ending clean mount [ 207.705597][ T7156] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.936945][ T8081] loop1: detected capacity change from 0 to 4096 [ 207.991367][ T6622] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 208.062479][ T8084] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.149873][ T28] audit: type=1800 audit(1786110845.748:89): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.434" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 208.544274][ T5812] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 208.841927][ T8081] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 209.551852][ T8110] loop6: detected capacity change from 0 to 512 [ 209.588902][ T8110] EXT4-fs: Ignoring removed i_version option [ 209.643736][ T8110] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.694646][ T8110] EXT4-fs (loop6): 1 truncate cleaned up [ 209.702526][ T8110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.970994][ T8060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.011254][ T7156] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.163557][ T5812] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.192316][ T5812] usb 2-1: no configurations [ 210.201864][ T5812] usb 2-1: can't read configurations, error -22 [ 210.280119][ T8126] mmap: syz.6.445 (8126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.446223][ T8130] loop0: detected capacity change from 0 to 1024 [ 210.577546][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.623034][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.673653][ T8134] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.681051][ T8134] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.723072][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.734131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.753033][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.786498][ T8134] hfsplus: request for non-existent node 33423360 in B*Tree [ 210.823301][ T8134] hfsplus: request for non-existent node 33423360 in B*Tree [ 211.003385][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 211.010925][ T8130] hfsplus: request for non-existent node 33423360 in B*Tree [ 211.753955][ T28] audit: type=1800 audit(1786110849.348:90): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.454" name="c_srate" dev="configfs" ino=16618 res=0 errno=0 [ 211.795809][ T8169] loop6: detected capacity change from 0 to 16 [ 211.864027][ T8169] erofs: (device loop6): mounted with root inode @ nid 36. [ 212.179431][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.185696][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 212.220618][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.458'. [ 212.891553][ T8201] loop0: detected capacity change from 0 to 4096 [ 213.022713][ T8201] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 213.217544][ T28] audit: type=1804 audit(1786110850.818:91): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.462" name="/newroot/138/file1/bus/file1" dev="loop0" ino=34 res=1 errno=0 [ 213.497812][ T8212] Bluetooth: MGMT ver 1.22 [ 213.526230][ T8212] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 213.800424][ T28] audit: type=1800 audit(1786110851.398:92): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.467" name="c_srate" dev="configfs" ino=16667 res=0 errno=0 [ 214.092074][ T8233] loop1: detected capacity change from 0 to 1024 [ 214.112801][ T8233] EXT4-fs: Ignoring removed bh option [ 214.135586][ T8233] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.169085][ T8233] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 214.217224][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.756862][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.681817][ T8315] loop0: detected capacity change from 0 to 256 [ 216.710522][ T8289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.813301][ T8315] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 216.875240][ T8313] loop6: detected capacity change from 0 to 4096 [ 218.045242][ T8242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.220482][ T8242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.355538][ T8242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.443848][ T8242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.936030][ T8242] hsr_slave_0: left promiscuous mode [ 219.942536][ T8242] hsr_slave_1: left promiscuous mode [ 219.951559][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.959701][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.975133][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.982726][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.996195][ T8242] bridge_slave_1: left allmulticast mode [ 220.002096][ T8242] bridge_slave_1: left promiscuous mode [ 220.018005][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.030338][ T8242] bridge_slave_0: left allmulticast mode [ 220.040048][ T8242] bridge_slave_0: left promiscuous mode [ 220.049880][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.099234][ T8242] veth1_macvtap: left promiscuous mode [ 220.107586][ T8242] veth0_macvtap: left promiscuous mode [ 220.122066][ T8242] veth1_vlan: left promiscuous mode [ 220.129005][ T8242] veth0_vlan: left promiscuous mode [ 220.881021][ T8395] loop6: detected capacity change from 0 to 4096 [ 220.992166][ T8399] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.100242][ T28] audit: type=1800 audit(1786110858.698:93): pid=8395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.488" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 221.530044][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.543766][ T8] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 221.556443][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.568208][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.600789][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.609409][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.618068][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.198291][ T8242] team0 (unregistering): Port device team_slave_1 removed [ 222.379733][ T8242] team0 (unregistering): Port device team_slave_0 removed [ 222.389445][ T8] usb 7-1: unable to get BOS descriptor or descriptor too short [ 222.405822][ T8] usb 7-1: no configurations [ 222.413254][ T8] usb 7-1: can't read configurations, error -22 [ 222.490695][ T8242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.611007][ T8242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.242166][ T8418] loop5: detected capacity change from 0 to 1024 [ 223.254165][ T8416] loop6: detected capacity change from 0 to 4096 [ 223.278680][ T8418] EXT4-fs: Ignoring removed bh option [ 223.314797][ T8418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.336635][ T8418] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 223.370838][ T8419] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.464979][ T8418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.523065][ T28] audit: type=1800 audit(1786110861.108:94): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.503" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 223.680681][ T8242] bond0 (unregistering): Released all slaves [ 223.708156][ T51] Bluetooth: hci1: command tx timeout [ 223.863247][ T8] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 223.940650][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.307822][ T8429] loop1: detected capacity change from 0 to 2048 [ 224.530017][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.753351][ T8429] loop1: detected capacity change from 2048 to 0 [ 224.790869][ T8436] syz.1.498: attempt to access beyond end of device [ 224.790869][ T8436] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 224.862848][ T8436] syz.1.498: attempt to access beyond end of device [ 224.862848][ T8436] loop1: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 224.915189][ T8436] syz.1.498: attempt to access beyond end of device [ 224.915189][ T8436] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 224.948260][ T8436] syz.1.498: attempt to access beyond end of device [ 224.948260][ T8436] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 224.994279][ T8436] syz.1.498: attempt to access beyond end of device [ 224.994279][ T8436] loop1: rw=12288, sector=20, nr_sectors = 4 limit=0 [ 225.027041][ T8436] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #15: block 5: comm syz.1.498: unable to read itable block [ 225.067697][ T8436] syz.1.498: attempt to access beyond end of device [ 225.067697][ T8436] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 225.119966][ T8436] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.160436][ T8436] EXT4-fs (loop1): I/O error while writing superblock [ 225.218516][ T8436] syz.1.498: attempt to access beyond end of device [ 225.218516][ T8436] loop1: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 225.258492][ T8] usb 7-1: unable to get BOS descriptor or descriptor too short [ 225.271278][ T8436] syz.1.498: attempt to access beyond end of device [ 225.271278][ T8436] loop1: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 225.283743][ T8] usb 7-1: no configurations [ 225.289391][ T8] usb 7-1: can't read configurations, error -22 [ 225.321161][ T8436] syz.1.498: attempt to access beyond end of device [ 225.321161][ T8436] loop1: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 225.361073][ T8436] syz.1.498: attempt to access beyond end of device [ 225.361073][ T8436] loop1: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 225.389489][ T8427] loop5: detected capacity change from 0 to 32768 [ 225.408685][ T8427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.495 (8427) [ 225.431733][ T8436] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #15: block 5: comm syz.1.498: unable to read itable block [ 225.446279][ T8436] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.459005][ T8436] EXT4-fs (loop1): I/O error while writing superblock [ 225.466891][ T8436] EXT4-fs error (device loop1) in ext4_setattr:5683: IO failure [ 225.475480][ T8436] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.497691][ T8436] EXT4-fs (loop1): I/O error while writing superblock [ 225.526171][ T8427] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.557339][ T8427] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 225.587697][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 225.594854][ T8427] BTRFS info (device loop5): setting nodatasum [ 225.601166][ T8427] BTRFS info (device loop5): force zlib compression, level 3 [ 225.625285][ T5774] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #2: block 4: comm syz-executor: unable to read itable block [ 225.653004][ T8427] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 225.662318][ T8427] BTRFS info (device loop5): use lzo compression, level 0 [ 225.675174][ T5774] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.706209][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 225.706653][ T8427] BTRFS info (device loop5): turning on flush-on-commit [ 225.732856][ T8427] BTRFS info (device loop5): enabling auto defrag [ 225.736699][ T5774] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: IO failure [ 225.742501][ T8427] BTRFS info (device loop5): max_inline at 4096 [ 225.764717][ T8427] BTRFS info (device loop5): using free space tree [ 225.774383][ T51] Bluetooth: hci1: command tx timeout [ 225.786447][ T5774] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.813113][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 225.819944][ T5774] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #2: comm syz-executor: mark_inode_dirty error [ 225.870809][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.878334][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.885817][ T8405] bridge_slave_0: entered allmulticast mode [ 225.893809][ T8405] bridge_slave_0: entered promiscuous mode [ 225.904525][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.911928][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.919711][ T8405] bridge_slave_1: entered allmulticast mode [ 225.926986][ T5774] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 225.928060][ T8405] bridge_slave_1: entered promiscuous mode [ 225.973277][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.986698][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.020567][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 226.073417][ T8427] BTRFS info (device loop5): enabling ssd optimizations [ 226.108748][ T8405] team0: Port device team_slave_0 added [ 226.168118][ T8405] team0: Port device team_slave_1 added [ 226.243503][ T8242] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4620: inode #15: block 5: comm kworker/u4:10: unable to read itable block [ 226.293528][ T8242] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 226.301879][ T8242] EXT4-fs (loop1): I/O error while writing superblock [ 226.348319][ T8242] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4620: inode #2: block 4: comm kworker/u4:10: unable to read itable block [ 226.415515][ T8242] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 226.433268][ T8242] EXT4-fs (loop1): I/O error while writing superblock [ 226.448231][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.465797][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.506576][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.527066][ T8472] overlayfs: upper fs does not support file handles, falling back to index=off. [ 226.546610][ T5774] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 226.568871][ T8431] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 226.577987][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.593227][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.600844][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.646935][ T6622] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.723427][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.099875][ T985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.346032][ T985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.570176][ T985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.637405][ T8405] hsr_slave_0: entered promiscuous mode [ 227.664432][ T8405] hsr_slave_1: entered promiscuous mode [ 227.798414][ T985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.858477][ T51] Bluetooth: hci1: command tx timeout [ 228.177762][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.190025][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.199701][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.212140][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.255810][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.280575][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.579647][ T8242] rpcbind: server 127.0.0.1 not responding, timed out [ 229.449083][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 229.651090][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.671200][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.682883][ T8487] bridge_slave_0: entered allmulticast mode [ 229.695201][ T8487] bridge_slave_0: entered promiscuous mode [ 229.750438][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.762811][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.772145][ T8487] bridge_slave_1: entered allmulticast mode [ 229.793770][ T8487] bridge_slave_1: entered promiscuous mode [ 229.881359][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.933691][ T51] Bluetooth: hci1: command tx timeout [ 229.947925][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.118479][ T8487] team0: Port device team_slave_0 added [ 230.132522][ T8487] team0: Port device team_slave_1 added [ 230.152371][ T985] hsr_slave_0: left promiscuous mode [ 230.158428][ T985] hsr_slave_1: left promiscuous mode [ 230.164865][ T985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.172468][ T985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.182205][ T985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.189833][ T985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.198116][ T985] bridge_slave_1: left allmulticast mode [ 230.203985][ T985] bridge_slave_1: left promiscuous mode [ 230.209910][ T985] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.219909][ T985] bridge_slave_0: left allmulticast mode [ 230.226042][ T985] bridge_slave_0: left promiscuous mode [ 230.231836][ T985] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.262549][ T985] veth1_macvtap: left promiscuous mode [ 230.269380][ T985] veth0_macvtap: left promiscuous mode [ 230.275154][ T985] veth1_vlan: left promiscuous mode [ 230.280526][ T985] veth0_vlan: left promiscuous mode [ 230.333304][ T51] Bluetooth: hci3: command tx timeout [ 230.594733][ T9] dvb-usb: did not find the firmware file 'af9005.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.617346][ T9] dvb_usb_af9005: probe of 6-1:1.0 failed with error -110 [ 230.648451][ T9] usb 6-1: USB disconnect, device number 2 [ 231.139720][ T985] team0 (unregistering): Port device team_slave_1 removed [ 231.207637][ T985] team0 (unregistering): Port device team_slave_0 removed [ 231.269449][ T985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.338514][ T985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.784664][ T985] bond0 (unregistering): Released all slaves [ 231.942448][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.973237][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.037568][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.050774][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.057871][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.084115][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.227671][ T8487] hsr_slave_0: entered promiscuous mode [ 232.241275][ T8487] hsr_slave_1: entered promiscuous mode [ 232.249092][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.271612][ T8487] Cannot create hsr debugfs directory [ 232.416281][ T51] Bluetooth: hci3: command tx timeout [ 232.529957][ T8405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.544545][ T8405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.589159][ T8405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.600301][ T8405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.849243][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.877656][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.968850][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.976109][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.991444][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.998690][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.235668][ T8487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.257641][ T8487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.287535][ T8487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.308733][ T8487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.515679][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.568071][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.587385][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.625209][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.632436][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.654933][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.662198][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.865454][ T8405] veth0_vlan: entered promiscuous mode [ 233.898623][ T8405] veth1_vlan: entered promiscuous mode [ 233.961859][ T8405] veth0_macvtap: entered promiscuous mode [ 233.998983][ T8405] veth1_macvtap: entered promiscuous mode [ 234.058354][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.072505][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.083276][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.094410][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.106344][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.120622][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.132508][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.143091][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.173162][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.194706][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.248983][ T8405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.275216][ T8405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.288153][ T8405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.298401][ T8405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.382629][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.493847][ T51] Bluetooth: hci3: command tx timeout [ 234.531667][ T8242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.547931][ T8242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.599265][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.603581][ T8487] veth0_vlan: entered promiscuous mode [ 234.614248][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.640336][ T8487] veth1_vlan: entered promiscuous mode [ 234.687803][ T8487] veth0_macvtap: entered promiscuous mode [ 234.724893][ T8487] veth1_macvtap: entered promiscuous mode [ 234.876851][ T8577] loop0: detected capacity change from 0 to 1024 [ 234.941983][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.977846][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.000842][ T8577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.014334][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.031921][ T8577] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.042123][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.092635][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.132136][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.186009][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.326264][ T8405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.334534][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.362439][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.399771][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.430316][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.485122][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.553187][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.574245][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.601132][ T8487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.648787][ T8487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.662805][ T8595] loop0: detected capacity change from 0 to 1024 [ 235.669320][ T8487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.679915][ T8595] EXT4-fs: Ignoring removed bh option [ 235.696938][ T8487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.751919][ T8595] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.790739][ T8593] loop6: detected capacity change from 0 to 4096 [ 235.814090][ T8595] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 235.888732][ T8595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.003137][ T8603] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.139670][ T28] audit: type=1800 audit(1786110873.728:95): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.508" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 236.170209][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.224417][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.388161][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.424865][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.523372][ T5841] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 236.573627][ T51] Bluetooth: hci3: command tx timeout [ 236.679287][ T8405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.892645][ T8611] loop1: detected capacity change from 0 to 2048 [ 236.934762][ T8611] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.954145][ T8607] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 237.231041][ T8598] loop5: detected capacity change from 0 to 32768 [ 237.355175][ T8598] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.791218][ T8598] XFS (loop5): Ending clean mount [ 237.820516][ T8598] XFS (loop5): Quotacheck needed: Please wait. [ 238.006427][ T8598] XFS (loop5): Quotacheck: Done. [ 238.129385][ T8638] loop2: detected capacity change from 0 to 7 [ 238.173149][ T5841] usb 7-1: unable to get BOS descriptor or descriptor too short [ 238.193762][ T8638] Dev loop2: unable to read RDB block 7 [ 238.206758][ T5841] usb 7-1: no configurations [ 238.211467][ T5841] usb 7-1: can't read configurations, error -22 [ 238.245151][ T8638] loop2: AHDI p1 p2 p3 [ 238.254887][ T8638] loop2: partition table partially beyond EOD, truncated [ 238.276037][ T8638] loop2: p1 start 1601398130 is beyond EOD, truncated [ 238.303568][ T8638] loop2: p2 start 1702059890 is beyond EOD, truncated [ 238.387897][ T6622] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.745284][ T8629] loop1: detected capacity change from 0 to 32768 [ 238.786092][ T8629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.510 (8629) [ 238.849686][ T8629] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.894525][ T8629] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 238.963247][ T8629] BTRFS info (device loop1): setting nodatasum [ 238.969525][ T8629] BTRFS info (device loop1): force zlib compression, level 3 [ 239.043028][ T8629] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 239.052365][ T8629] BTRFS info (device loop1): use lzo compression, level 0 [ 239.119024][ T8629] BTRFS info (device loop1): turning on flush-on-commit [ 239.150400][ T8629] BTRFS info (device loop1): enabling auto defrag [ 239.176446][ T8629] BTRFS info (device loop1): max_inline at 4096 [ 239.204618][ T8629] BTRFS info (device loop1): using free space tree [ 239.380605][ T8629] BTRFS info (device loop1): enabling ssd optimizations [ 239.908878][ T8687] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 239.951599][ T8487] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.769471][ T8712] loop6: detected capacity change from 0 to 256 [ 240.933685][ T8715] loop5: detected capacity change from 0 to 512 [ 240.984681][ T8715] EXT4-fs: Ignoring removed bh option [ 241.183190][ T8715] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.531: corrupted in-inode xattr: e_value size too large [ 241.229753][ T8715] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.531: couldn't read orphan inode 15 (err -117) [ 241.265013][ T8715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.380527][ T8715] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.531: Unrecognised inode hash code 4 [ 241.433256][ T8715] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.531: Corrupt directory, running e2fsck is recommended [ 241.601378][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.921843][ T8731] block device autoloading is deprecated and will be removed. [ 242.373488][ T8759] 9pnet: p9_errstr2errno: server reported unknown error n$Žþÿÿÿÿÿÿÿ [ 242.811464][ T8757] loop1: detected capacity change from 0 to 32768 [ 243.073593][ T8757] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 243.116808][ T8757] JBD2: Ignoring recovery information on journal [ 243.375044][ T8757] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.713019][ T27] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 243.883581][ T8793] input: syz1 as /devices/virtual/input/input5 [ 243.904290][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 243.917222][ T27] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 243.975902][ T27] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.001970][ T27] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.010166][ T8487] ocfs2: Unmounting device (7,1) on (node local) [ 244.052425][ T27] usb 7-1: Product: syz [ 244.056853][ T27] usb 7-1: Manufacturer: syz [ 244.061866][ T27] usb 7-1: SerialNumber: syz [ 244.090457][ T27] usb 7-1: config 0 descriptor?? [ 244.096421][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.106612][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 244.128608][ T8783] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 244.176378][ T27] hub 7-1:0.0: bad descriptor, ignoring hub [ 244.196462][ T27] hub: probe of 7-1:0.0 failed with error -5 [ 244.736469][ T5817] usb 7-1: USB disconnect, device number 12 [ 244.760751][ T8809] loop5: detected capacity change from 0 to 512 [ 244.819990][ T8809] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.880999][ T8809] EXT4-fs (loop5): 1 truncate cleaned up [ 244.955268][ T8809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.104770][ T28] audit: type=1800 audit(1786110882.708:96): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.554" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 245.653692][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.702151][ T8837] loop0: detected capacity change from 0 to 1024 [ 245.743742][ T8837] EXT4-fs: quotafile must be on filesystem root [ 245.847908][ T5775] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.035414][ T8850] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 246.053064][ T8850] netlink: 'syz.1.566': attribute type 2 has an invalid length. [ 246.061275][ T8850] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 246.088457][ T8850] netlink: 'syz.1.566': attribute type 2 has an invalid length. [ 246.121079][ T8850] netlink: 184 bytes leftover after parsing attributes in process `syz.1.566'. [ 247.276571][ T8854] loop0: detected capacity change from 0 to 4096 [ 247.449746][ T8854] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 247.513315][ T8854] ntfs3: loop0: Failed to load $Extend (-22). [ 247.519501][ T8854] ntfs3: loop0: Failed to initialize $Extend. [ 247.543162][ T5812] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 247.596579][ T8876] syzkaller1: entered allmulticast mode [ 247.733130][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 247.772788][ T5812] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 247.788140][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.818348][ T5812] usb 2-1: config 0 descriptor?? [ 247.836003][ T5812] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 249.293408][ T5812] gspca_sonixj: i2c_w8 err -71 [ 249.327472][ T5812] sonixj: probe of 2-1:0.0 failed with error -71 [ 249.340475][ T8915] loop6: detected capacity change from 0 to 128 [ 249.354612][ T5812] usb 2-1: USB disconnect, device number 8 [ 249.410937][ T8915] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 249.462582][ T8915] hpfs: filesystem error: improperly stopped [ 249.496609][ T8915] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 249.528452][ T8915] hpfs: You really don't want any checks? You are crazy... [ 249.554412][ T8915] hpfs: Code page index out of array [ 249.570065][ T8915] hpfs: code page support is disabled [ 249.570318][ T5816] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 249.591785][ T8915] hpfs: hpfs_map_4sectors(): unaligned read [ 249.608573][ T8901] loop0: detected capacity change from 0 to 32768 [ 249.615555][ T8915] hpfs: hpfs_map_4sectors(): unaligned read [ 249.621519][ T8915] hpfs: filesystem error: unable to find root dir [ 249.652318][ T5816] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.696945][ T8901] loop0: p1 p3 < > [ 250.945007][ T8922] loop1: detected capacity change from 0 to 32768 [ 251.012260][ T8935] netlink: 44 bytes leftover after parsing attributes in process `syz.6.593'. [ 251.699397][ T8947] ip6gre1: entered promiscuous mode [ 251.713830][ T8947] ip6gre1: entered allmulticast mode [ 251.850234][ T8947] syz.5.599 (8947) used greatest stack depth: 19960 bytes left [ 253.313560][ T8970] loop0: detected capacity change from 0 to 32768 [ 253.350570][ T8972] loop1: detected capacity change from 0 to 32768 [ 253.376249][ T8972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.607 (8972) [ 253.401523][ T8970] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 253.418925][ T8970] JBD2: Ignoring recovery information on journal [ 253.463926][ T8972] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.503457][ T8970] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 253.523760][ T8972] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 253.532580][ T8972] BTRFS info (device loop1): setting nodatasum [ 253.553844][ T8972] BTRFS info (device loop1): force zlib compression, level 3 [ 253.573904][ T8972] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 253.596425][ T8972] BTRFS info (device loop1): use lzo compression, level 0 [ 253.614268][ T8972] BTRFS info (device loop1): turning on flush-on-commit [ 253.632304][ T8972] BTRFS info (device loop1): enabling auto defrag [ 253.652443][ T8972] BTRFS info (device loop1): max_inline at 4096 [ 253.696492][ T8972] BTRFS info (device loop1): using free space tree [ 253.798113][ T8972] BTRFS info (device loop1): enabling ssd optimizations [ 253.848111][ T8405] ocfs2: Unmounting device (7,0) on (node local) [ 253.953537][ T5817] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 254.088781][ T8487] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.145257][ T5817] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.175171][ T5817] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 254.228403][ T5817] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 254.242394][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.251033][ T5817] usb 7-1: Product: syz [ 254.258013][ T5817] usb 7-1: Manufacturer: syz [ 254.262679][ T5817] usb 7-1: SerialNumber: syz [ 254.579854][ T5817] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 254.832349][ T9012] loop1: detected capacity change from 0 to 512 [ 254.850777][ T9012] EXT4-fs (loop1): Test dummy encryption mode enabled [ 254.862143][ T9012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.894242][ T9012] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.616: bad orphan inode 131083 [ 254.944865][ T9012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.077215][ T5841] usb 7-1: USB disconnect, device number 13 [ 255.098328][ T8487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.115785][ T5841] usblp0: removed [ 255.821410][ T9038] loop5: detected capacity change from 0 to 512 [ 255.852290][ T9038] EXT4-fs: Ignoring removed orlov option [ 255.868964][ T9038] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.887805][ T9038] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.622: corrupted in-inode xattr: e_value size too large [ 255.925616][ T9038] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.622: couldn't read orphan inode 15 (err -117) [ 255.949861][ T9038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.118484][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.172808][ T9031] loop1: detected capacity change from 0 to 32768 [ 256.193690][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.200150][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.247921][ T9031] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.620 (9031) [ 256.288883][ T9031] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.339651][ T9031] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 256.360749][ T9048] loop5: detected capacity change from 0 to 128 [ 256.363319][ T9031] BTRFS info (device loop1): setting nodatasum [ 256.387832][ T9031] BTRFS info (device loop1): force zlib compression, level 3 [ 256.407005][ T9048] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 256.422249][ T9031] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.449993][ T9048] hpfs: filesystem error: improperly stopped [ 256.458436][ T9031] BTRFS info (device loop1): use lzo compression, level 0 [ 256.470855][ T9031] BTRFS info (device loop1): turning on flush-on-commit [ 256.480423][ T9031] BTRFS info (device loop1): enabling auto defrag [ 256.500344][ T9048] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 256.518316][ T9031] BTRFS info (device loop1): max_inline at 4096 [ 256.525618][ T9048] hpfs: You really don't want any checks? You are crazy... [ 256.542053][ T9031] BTRFS info (device loop1): using free space tree [ 256.563460][ T9048] hpfs: Code page index out of array [ 256.568855][ T9048] hpfs: code page support is disabled [ 256.613915][ T9048] hpfs: hpfs_map_4sectors(): unaligned read [ 256.620038][ T9048] hpfs: hpfs_map_4sectors(): unaligned read [ 256.626166][ T9048] hpfs: filesystem error: unable to find root dir [ 256.705135][ T9031] BTRFS info (device loop1): enabling ssd optimizations [ 257.025984][ T8242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.229083][ T8487] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.329067][ T8242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.656295][ T8242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.096808][ T8242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.241012][ T9089] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.529816][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.552000][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.573614][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.593405][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.604714][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.622706][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.590981][ T9093] chnl_net:caif_netlink_parms(): no params data found [ 259.837434][ T9093] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.848460][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.855981][ T9093] bridge_slave_0: entered allmulticast mode [ 259.863753][ T9093] bridge_slave_0: entered promiscuous mode [ 259.910738][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.918226][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.928434][ T9093] bridge_slave_1: entered allmulticast mode [ 259.939911][ T9093] bridge_slave_1: entered promiscuous mode [ 260.067632][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.090257][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.368894][ T9093] team0: Port device team_slave_0 added [ 260.404024][ T8242] hsr_slave_0: left promiscuous mode [ 260.410069][ T8242] hsr_slave_1: left promiscuous mode [ 260.423514][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.431140][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.441818][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.449526][ T8242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.457869][ T8242] bridge_slave_1: left allmulticast mode [ 260.464229][ T8242] bridge_slave_1: left promiscuous mode [ 260.470052][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.480434][ T8242] bridge_slave_0: left allmulticast mode [ 260.486749][ T8242] bridge_slave_0: left promiscuous mode [ 260.492555][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.524821][ T8242] veth1_macvtap: left promiscuous mode [ 260.530488][ T8242] veth0_macvtap: left promiscuous mode [ 260.536285][ T8242] veth1_vlan: left promiscuous mode [ 260.541828][ T8242] veth0_vlan: left promiscuous mode [ 260.743086][ T5788] Bluetooth: hci1: command tx timeout [ 261.422817][ T8242] team0 (unregistering): Port device team_slave_1 removed [ 261.497608][ T8242] team0 (unregistering): Port device team_slave_0 removed [ 261.565937][ T8242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.635159][ T8242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.172680][ T8242] bond0 (unregistering): Released all slaves [ 262.308246][ T9093] team0: Port device team_slave_1 added [ 262.365882][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.373331][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.400151][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.438309][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.466038][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.513554][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.641672][ T9093] hsr_slave_0: entered promiscuous mode [ 262.674440][ T9093] hsr_slave_1: entered promiscuous mode [ 262.814976][ T5782] Bluetooth: hci1: command tx timeout [ 263.002388][ T9093] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.020225][ T9093] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 263.040259][ T9093] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 263.058717][ T9093] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 263.229903][ T9093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.279771][ T9093] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.294709][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.301908][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.337289][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.344588][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.377457][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 263.701198][ T9093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.063651][ T9093] veth0_vlan: entered promiscuous mode [ 264.078491][ T9093] veth1_vlan: entered promiscuous mode [ 264.129554][ T9093] veth0_macvtap: entered promiscuous mode [ 264.161544][ T9093] veth1_macvtap: entered promiscuous mode [ 264.186782][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.198685][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.210193][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.220996][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.233814][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.245206][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.258620][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.282553][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.294423][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.305188][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.316113][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.326717][ T9093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.338122][ T9093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.350289][ T9093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.370170][ T9093] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.379296][ T9093] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.390442][ T9093] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.400319][ T9093] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.613446][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.621374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.702815][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.712159][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.893581][ T5788] Bluetooth: hci1: command tx timeout [ 264.957261][ T9189] input: syz0 as /devices/virtual/input/input6 [ 265.645196][ T9200] loop7: detected capacity change from 0 to 32768 [ 265.693874][ T9200] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.639 (9200) [ 265.749945][ T9200] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.766349][ T9200] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 265.777555][ T9200] BTRFS info (device loop7): setting nodatasum [ 265.801193][ T9200] BTRFS info (device loop7): force zlib compression, level 3 [ 265.821792][ T9200] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 265.844357][ T9200] BTRFS info (device loop7): use lzo compression, level 0 [ 265.852249][ T9200] BTRFS info (device loop7): turning on flush-on-commit [ 265.874098][ T9200] BTRFS info (device loop7): enabling auto defrag [ 265.880948][ T9200] BTRFS info (device loop7): max_inline at 4096 [ 265.917347][ T9200] BTRFS info (device loop7): using free space tree [ 265.997452][ T9200] BTRFS info (device loop7): enabling ssd optimizations [ 266.273334][ T9093] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.973123][ T5788] Bluetooth: hci1: command tx timeout [ 267.172221][ T9250] loop7: detected capacity change from 0 to 4096 [ 267.293778][ T9257] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.366141][ T28] audit: type=1800 audit(1786110904.968:97): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.640" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 267.763786][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 267.839386][ T9271] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 268.963148][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 268.997621][ T9] usb 8-1: no configurations [ 269.002339][ T9] usb 8-1: can't read configurations, error -22 [ 269.258126][ T9295] loop5: detected capacity change from 0 to 128 [ 269.283429][ T9295] FAT-fs (loop5): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 269.453235][ T5782] Bluetooth: hci4: command 0xfc11 tx timeout [ 269.456585][ T5788] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 270.165171][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.193021][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.379704][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.403383][ T42] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.549053][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.596846][ T42] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.782150][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.810450][ T42] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.883597][ T9323] netlink: 76 bytes leftover after parsing attributes in process `syz.6.667'. [ 270.903014][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 271.118004][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.152989][ T5816] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 271.210330][ T5816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.225326][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.243184][ T5816] usb 2-1: Product: syz [ 271.250921][ T5816] usb 2-1: Manufacturer: syz [ 271.268926][ T5816] usb 2-1: SerialNumber: syz [ 271.472715][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.488374][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.510124][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.523564][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.556635][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.567630][ T5816] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 271.586928][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.598675][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.607786][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.615959][ T5816] usb 2-1: USB disconnect, device number 9 [ 272.143192][ T5816] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 272.362987][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 272.384232][ T5816] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 272.392609][ T5816] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 272.433149][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.462953][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.482990][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 272.503045][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.532587][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.582990][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.823635][ T5816] usb 2-1: GET_CAPABILITIES returned 0 [ 272.829262][ T5816] usbtmc 2-1:16.0: can't read capabilities [ 272.988245][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 273.095974][ T5816] usb 2-1: USB disconnect, device number 10 [ 273.452808][ T42] hsr_slave_0: left promiscuous mode [ 273.465919][ T42] hsr_slave_1: left promiscuous mode [ 273.474777][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.482349][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.491403][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.499431][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.509288][ T42] bridge_slave_1: left allmulticast mode [ 273.515149][ T42] bridge_slave_1: left promiscuous mode [ 273.520964][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.530678][ T42] bridge_slave_0: left allmulticast mode [ 273.540733][ T42] bridge_slave_0: left promiscuous mode [ 273.547188][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.591304][ T42] veth1_macvtap: left promiscuous mode [ 273.597068][ T42] veth0_macvtap: left promiscuous mode [ 273.602796][ T42] veth1_vlan: left promiscuous mode [ 273.610491][ T42] veth0_vlan: left promiscuous mode [ 273.693200][ T5788] Bluetooth: hci2: command tx timeout [ 273.761172][ T42] infiniband syz0: set down [ 274.652363][ T42] team0 (unregistering): Port device team_slave_1 removed [ 274.732109][ T42] team0 (unregistering): Port device team_slave_0 removed [ 274.802108][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.872520][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.210367][ T985] smc: removing ib device syz0 [ 275.461015][ T42] bond0 (unregistering): Released all slaves [ 275.575637][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.582841][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.590344][ T9331] bridge_slave_0: entered allmulticast mode [ 275.598849][ T9331] bridge_slave_0: entered promiscuous mode [ 275.609635][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.620619][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.631828][ T9331] bridge_slave_1: entered allmulticast mode [ 275.649936][ T9331] bridge_slave_1: entered promiscuous mode [ 275.708053][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.731628][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.779968][ T5788] Bluetooth: hci2: command tx timeout [ 275.846616][ T9331] team0: Port device team_slave_0 added [ 275.867888][ T9331] team0: Port device team_slave_1 added [ 275.942241][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.972417][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.999227][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.040966][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.049351][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.076387][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.347864][ T9331] hsr_slave_0: entered promiscuous mode [ 276.373891][ T9331] hsr_slave_1: entered promiscuous mode [ 276.386819][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.419512][ T9331] Cannot create hsr debugfs directory [ 277.199092][ T9331] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 277.263619][ T9331] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 277.293215][ T9331] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 277.329421][ T9331] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 277.499983][ T9331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.541317][ T9331] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.565578][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.572822][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.600542][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.607917][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.853491][ T5788] Bluetooth: hci2: command tx timeout [ 277.927715][ T9331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.398793][ T9331] veth0_vlan: entered promiscuous mode [ 278.422222][ T9331] veth1_vlan: entered promiscuous mode [ 278.468864][ T9331] veth0_macvtap: entered promiscuous mode [ 278.487859][ T9331] veth1_macvtap: entered promiscuous mode [ 278.512714][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.524732][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.542753][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.559520][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.572254][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.590121][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.602285][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.619574][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.635130][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.648250][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.659378][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.669393][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.680931][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.695457][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.710140][ T9331] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.719678][ T9331] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.730153][ T9331] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.743995][ T9331] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.886705][ T8242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.906050][ T8242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.957666][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.977851][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.784975][ T9437] loop8: detected capacity change from 0 to 4096 [ 279.933195][ T5788] Bluetooth: hci2: command tx timeout [ 279.970619][ T9442] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.055860][ T28] audit: type=1800 audit(1786110917.648:98): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.670" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 280.301761][ T9423] loop7: detected capacity change from 0 to 32768 [ 280.357182][ T9423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.677 (9423) [ 280.413203][ T5762] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 280.449304][ T9423] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.493635][ T9423] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 280.502534][ T9423] BTRFS info (device loop7): enabling auto defrag [ 280.543104][ T9423] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 280.568836][ T9423] BTRFS info (device loop7): use zstd compression, level 3 [ 280.593487][ T9423] BTRFS info (device loop7): turning on async discard [ 280.600488][ T9423] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 280.670127][ T9423] BTRFS info (device loop7): trying to use backup root at mount time [ 280.683771][ T9423] BTRFS info (device loop7): enabling ssd optimizations [ 280.703139][ T9423] BTRFS info (device loop7): using spread ssd allocation scheme [ 280.737692][ T9423] BTRFS info (device loop7): setting nodatacow, compression disabled [ 280.749140][ T9446] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean [ 280.772639][ T9423] BTRFS info (device loop7): using free space tree [ 280.900261][ T9473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.934167][ T985] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 281.004396][ T9423] BTRFS error (device loop7): failed to load root extent [ 281.012233][ T9423] BTRFS warning (device loop7): try to load backup roots slot 1 [ 281.092673][ T3435] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 281.125045][ T9423] BTRFS warning (device loop7): couldn't read tree root [ 281.194885][ T9423] BTRFS warning (device loop7): try to load backup roots slot 2 [ 281.219596][ T170] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 281.235626][ T9478] loop6: detected capacity change from 0 to 128 [ 281.280686][ T9423] BTRFS warning (device loop7): couldn't read tree root [ 281.307483][ T9423] BTRFS warning (device loop7): try to load backup roots slot 3 [ 281.344971][ T5775] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.457935][ T9423] BTRFS info (device loop7): rebuilding free space tree [ 281.564557][ T9423] BTRFS info (device loop7): checking UUID tree [ 282.281522][ T9093] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.373121][ T5762] usb 9-1: unable to get BOS descriptor or descriptor too short [ 282.394535][ T5762] usb 9-1: no configurations [ 282.399503][ T5762] usb 9-1: can't read configurations, error -22 [ 282.657208][ T9498] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3058022694 (6116045388 ns) > initial count (4472718528 ns). Using initial count to start timer. [ 284.055638][ T969] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 284.273134][ T969] usb 8-1: Using ep0 maxpacket: 32 [ 284.280774][ T969] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.299319][ T969] usb 8-1: config 0 has no interface number 0 [ 284.313368][ T969] usb 8-1: config 0 interface 184 has no altsetting 0 [ 284.340527][ T969] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.379746][ T969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.400217][ T969] usb 8-1: Product: syz [ 284.415083][ T969] usb 8-1: Manufacturer: syz [ 284.419819][ T969] usb 8-1: SerialNumber: syz [ 284.439142][ T969] usb 8-1: config 0 descriptor?? [ 284.463625][ T969] smsc75xx v1.0.0 [ 284.929786][ T5812] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 285.080273][ T969] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.103454][ T969] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 285.123251][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 285.129267][ T969] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 285.148795][ T5812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.159162][ T5812] usb 2-1: config 0 has no interface number 0 [ 285.179540][ T969] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 285.186606][ T5812] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.208706][ T969] usb 8-1: USB disconnect, device number 4 [ 285.218473][ T5812] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.243420][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.265388][ T5812] usb 2-1: config 0 descriptor?? [ 285.314145][ T5812] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 285.516250][ T969] usb 2-1: USB disconnect, device number 11 [ 285.694133][ T9553] loop6: detected capacity change from 0 to 40427 [ 285.716264][ T9553] F2FS-fs (loop6): invalid crc value [ 285.767767][ T9553] F2FS-fs (loop6): Found nat_bits in checkpoint [ 285.924720][ T9553] F2FS-fs (loop6): Start checkpoint disabled! [ 286.003161][ T9553] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 286.123083][ T969] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 286.207909][ T9577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 286.328865][ T969] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.362787][ T969] usb 2-1: config 0 has no interface number 0 [ 286.390725][ T969] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 286.440694][ T969] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.488621][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.530094][ T969] usb 2-1: config 0 descriptor?? [ 286.546593][ T9553] bio_check_eod: 26 callbacks suppressed [ 286.546610][ T9553] syz.6.699: attempt to access beyond end of device [ 286.546610][ T9553] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 286.567200][ T969] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 286.957215][ T8242] kworker/u4:10: attempt to access beyond end of device [ 286.957215][ T8242] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 287.007697][ T8242] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 287.035462][ T8242] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 287.401486][ T5816] usb 2-1: USB disconnect, device number 12 [ 287.896719][ T9620] loop8: detected capacity change from 0 to 128 [ 287.939054][ T9620] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.954647][ T9620] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.037678][ T9331] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.099546][ T9600] loop7: detected capacity change from 0 to 32768 [ 288.281192][ T9600] JBD2: Ignoring recovery information on journal [ 288.418483][ T9600] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 288.978274][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 289.167837][ T9093] ocfs2: Unmounting device (7,7) on (node local) [ 289.636811][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 289.681683][ T9678] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.690953][ T9678] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.700188][ T9678] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.709552][ T9678] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.794763][ T9678] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.806424][ T9678] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.815782][ T9678] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.825070][ T9678] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.124543][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 290.178923][ T9678] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.187845][ T9678] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.196952][ T9678] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.206368][ T9678] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.328099][ T9678] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.337438][ T9678] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.346440][ T9678] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.356610][ T9678] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.518216][ T9700] netlink: 132 bytes leftover after parsing attributes in process `syz.8.730'. [ 290.925174][ T9706] loop8: detected capacity change from 0 to 2048 [ 291.052019][ T9706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.243482][ T9706] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 291.340145][ T9706] EXT4-fs (loop8): Remounting filesystem read-only [ 291.461875][ T9331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.631380][ T9725] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 291.696373][ T9731] kvm: apic: phys broadcast and lowest prio [ 292.165446][ C0] Unknown status report in ack skb [ 292.584857][ T9760] loop7: detected capacity change from 0 to 256 [ 293.923194][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.007912][ T9801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.051210][ T9804] loop7: detected capacity change from 0 to 128 [ 294.086763][ T9804] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.134975][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 294.147301][ T9804] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.163681][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.181662][ T27] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 294.217130][ T9804] syz.7.757 (pid 9804) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 294.314970][ T9093] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.325146][ T9808] netlink: 24 bytes leftover after parsing attributes in process `syz.6.758'. [ 294.525177][ T9815] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 294.844691][ T28] audit: type=1326 audit(1786110932.438:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 294.958748][ T28] audit: type=1326 audit(1786110932.438:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 294.987025][ T28] audit: type=1326 audit(1786110932.438:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.068430][ T28] audit: type=1326 audit(1786110932.438:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.202287][ T28] audit: type=1326 audit(1786110932.438:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.281220][ T28] audit: type=1326 audit(1786110932.438:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.342989][ T28] audit: type=1326 audit(1786110932.438:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.438815][ T28] audit: type=1326 audit(1786110932.438:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.480815][ T2322] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 295.507068][ T2322] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 295.523200][ T28] audit: type=1326 audit(1786110932.438:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 295.592804][ T28] audit: type=1326 audit(1786110932.438:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.8.761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe776f9e0d9 code=0x7ffc0000 [ 296.102692][ T9828] loop6: detected capacity change from 0 to 32768 [ 296.133310][ T9828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.762 (9828) [ 296.181253][ T9828] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.221315][ T9828] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 296.251905][ T9828] BTRFS info (device loop6): turning on sync discard [ 296.278091][ T9828] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 296.302144][ T9828] BTRFS info (device loop6): use zstd compression, level 3 [ 296.320686][ T9828] BTRFS info (device loop6): turning on async discard [ 296.330837][ T9828] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 296.378677][ T9828] BTRFS info (device loop6): trying to use backup root at mount time [ 296.403892][ T9828] BTRFS info (device loop6): enabling auto defrag [ 296.443163][ T9828] BTRFS info (device loop6): using free space tree [ 296.630412][ T170] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 296.649835][ T9846] loop7: detected capacity change from 0 to 32768 [ 296.674128][ T9828] BTRFS error (device loop6): failed to load root extent [ 296.674166][ T9846] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.767 (9846) [ 296.719068][ T9828] BTRFS warning (device loop6): try to load backup roots slot 1 [ 296.747990][ T12] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 296.792473][ T9828] BTRFS warning (device loop6): couldn't read tree root [ 296.795687][ T9846] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 296.833907][ T9828] BTRFS warning (device loop6): try to load backup roots slot 2 [ 296.854502][ T49] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 296.857578][ T9846] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 296.886285][ T5762] usb 2-1: USB disconnect, device number 13 [ 296.925103][ T9828] BTRFS warning (device loop6): couldn't read tree root [ 296.932256][ T9828] BTRFS warning (device loop6): try to load backup roots slot 3 [ 296.940366][ T9846] BTRFS info (device loop7): using free space tree [ 297.030383][ T9828] BTRFS info (device loop6): enabling ssd optimizations [ 297.038587][ T9828] BTRFS info (device loop6): rebuilding free space tree [ 297.121910][ T9828] BTRFS info (device loop6): checking UUID tree [ 297.232271][ T9846] BTRFS info (device loop7): enabling ssd optimizations [ 297.286495][ T9846] BTRFS info (device loop7): auto enabling async discard [ 297.598562][ T7156] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.846072][ T9093] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 298.124407][ T9906] binder: 9902:9906 ioctl 4018620d 0 returned -22 [ 298.233833][ T9907] binder: 9902:9907 ioctl c0306201 0 returned -14 [ 299.643273][ T9936] loop6: detected capacity change from 0 to 256 [ 299.692857][ T9936] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 300.944365][ T9958] loop6: detected capacity change from 0 to 64 [ 301.098901][ T9958] hfs: hfs: Invalid key length: 94 [ 301.111529][ T9958] hfs: request for non-existent node 1536 in B*Tree [ 301.122095][ T9958] hfs: request for non-existent node 1536 in B*Tree [ 301.186424][ T49] ------------[ cut here ]------------ [ 301.192082][ T49] kernel BUG at fs/hfs/inode.c:450! [ 301.198324][ T49] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 301.204631][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 301.212069][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.222183][ T49] Workqueue: writeback wb_workfn (flush-7:6) [ 301.228244][ T49] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 301.230042][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.233916][ T49] Code: c7 c1 00 53 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 53 33 97 e8 4f 11 84 ff e9 5e fe ff ff e8 f5 8e 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 301.259951][ T49] RSP: 0018:ffffc90000b9f340 EFLAGS: 00010293 [ 301.266040][ T49] RAX: ffffffff825be28b RBX: ffff88802c021ba8 RCX: ffff88801ce51e00 [ 301.274034][ T49] RDX: 0000000000000000 RSI: ffffffff8d339860 RDI: 0000000000000000 [ 301.282135][ T49] RBP: ffffc90000b9f4d0 R08: ffff88801ce51e00 R09: 0000000000000003 [ 301.290139][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 301.298135][ T49] R13: 1ffff92000173e6c R14: ffff88802c021b58 R15: 0000000000000000 [ 301.306217][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 301.315173][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.321783][ T49] CR2: 0000555588836a38 CR3: 0000000030692000 CR4: 00000000003506e0 [ 301.329786][ T49] Call Trace: [ 301.333092][ T49] [ 301.336046][ T49] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 301.341489][ T49] ? __rwlock_init+0x150/0x150 [ 301.346300][ T49] __writeback_single_inode+0x720/0xee0 [ 301.351913][ T49] writeback_sb_inodes+0x813/0x1020 [ 301.357177][ T49] ? queue_io+0x530/0x530 [ 301.361550][ T49] ? move_expired_inodes+0x726/0x770 [ 301.366992][ T49] ? rcu_is_watching+0x15/0xb0 [ 301.371812][ T49] ? queue_io+0x3ba/0x530 [ 301.376298][ T49] wb_writeback+0x45e/0xbe0 [ 301.380863][ T49] ? queue_io+0x391/0x530 [ 301.385246][ T49] ? percpu_ref_tryget+0x250/0x250 [ 301.390494][ T49] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 301.396517][ T49] ? __lock_acquire+0x7d80/0x7d80 [ 301.401750][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.406985][ T49] wb_workfn+0x400/0xe60 [ 301.411286][ T49] ? inode_wait_for_writeback+0x230/0x230 [ 301.417068][ T49] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 301.423098][ T49] ? __lock_acquire+0x7d80/0x7d80 [ 301.428166][ T49] ? read_lock_is_recursive+0x20/0x20 [ 301.433569][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.438809][ T49] ? process_scheduled_works+0x975/0x1600 [ 301.444568][ T49] ? process_scheduled_works+0x975/0x1600 [ 301.450410][ T49] process_scheduled_works+0xa60/0x1600 [ 301.456084][ T49] ? worker_attach_to_pool+0x370/0x370 [ 301.461577][ T49] ? assign_work+0x3cc/0x5d0 [ 301.466204][ T49] worker_thread+0xa5e/0xfe0 [ 301.470924][ T49] kthread+0x2fa/0x390 [ 301.475028][ T49] ? pr_cont_work+0x550/0x550 [ 301.479733][ T49] ? kthread_blkcg+0xd0/0xd0 [ 301.484351][ T49] ret_from_fork+0x48/0x80 [ 301.488801][ T49] ? kthread_blkcg+0xd0/0xd0 [ 301.493416][ T49] ret_from_fork_asm+0x11/0x20 [ 301.498227][ T49] [ 301.501283][ T49] Modules linked in: [ 301.528199][ T49] ---[ end trace 0000000000000000 ]--- [ 301.535409][ T49] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 301.541145][ T49] Code: c7 c1 00 53 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 53 33 97 e8 4f 11 84 ff e9 5e fe ff ff e8 f5 8e 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 301.562677][ T49] RSP: 0018:ffffc90000b9f340 EFLAGS: 00010293 [ 301.569164][ T49] RAX: ffffffff825be28b RBX: ffff88802c021ba8 RCX: ffff88801ce51e00 [ 301.576212][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.582447][ T49] RDX: 0000000000000000 RSI: ffffffff8d339860 RDI: 0000000000000000 [ 301.591261][ T49] RBP: ffffc90000b9f4d0 R08: ffff88801ce51e00 R09: 0000000000000003 [ 301.601062][ T49] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 301.609400][ T49] R13: 1ffff92000173e6c R14: ffff88802c021b58 R15: 0000000000000000 [ 301.622038][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.624907][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 301.666875][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.685361][ T49] CR2: 00007f5fa0a7c80e CR3: 0000000030692000 CR4: 00000000003506e0 [ 301.702617][ T49] Kernel panic - not syncing: Fatal exception [ 301.709393][ T49] Kernel Offset: disabled [ 301.713736][ T49] Rebooting in 86400 seconds..